Topic

JFrog Artifactory: news, advisories and analysis

3 articlesUpdated 18 Oct 2026

CyberSecureToday covers JFrog Artifactory across 3 articles published between 4 Sep 2026 and 18 Oct 2026. The coverage includes 2 vulnerability advisories and 1 incident or breach report. 2 advisories are rated critical or high severity.

Stories on JFrog Artifactory most often intersect with R3, Corda and CBDC, with Technology, Cloud & SaaS the most affected sector. The most recent story, “R3 Artifactory Takeover Exposes Corda Enterprise and Central Bank Digital Currency Supply Chain”, was published 18 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

Cyber AttackBanking & Fintech
R3 Artifactory Takeover Exposes Corda Enterprise and Central Bank Digital Currency Supply Chain
A critical default join key flaw in R3's JFrog Artifactory granted full administrative control over 269 repositories, including Corda Enterprise and CBDC builds.
Daniel Okafor18 Oct 202616 min read
ThreatsCloud & SaaSCritical
Attackers chain dual JFrog Artifactory vulnerabilities to hijack build pipelines and plant backdoors
Wiz Research caught threat actors chaining two JFrog Artifactory flaws (CVE-2026-42018 & CVE-2026-42016) to forge admin tokens and compromise enterprise software repositories.
Aisha Noor11 Sep 20266 min read
ThreatsCloud & SaaSHigh
Enterprise app CVE roundup: PeopleSoft, cPanel, Artifactory and Switchvox all need attention
Four high-severity vulnerabilities in widely deployed enterprise software — including a build-artefact repository that sits directly in the software supply chain.
Priya Raman4 Sep 20266 min read

Latest coverage

R3 Artifactory Takeover Exposes Corda Enterprise and Central Bank Digital Currency Supply Chain

Attackers chain dual JFrog Artifactory vulnerabilities to hijack build pipelines and plant backdoors

Enterprise app CVE roundup: PeopleSoft, cPanel, Artifactory and Switchvox all need attention